Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l_NtQ5a_QQhN6QXckwk1tvPTaPA.roa
File: l_NtQ5a_QQhN6QXckwk1tvPTaPA.roa (raw, json)
Hash identifier: G23LtW1XGdgrB0hfxjnJlyx7BesF66j0jC6/lgs7PqM=
Subject key identifier: 97:F3:6D:43:96:BF:41:08:4D:E9:05:DC:93:09:35:B6:F3:D3:68:F0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A086CD5EC4BC263DC0CC0A838985EEF84
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l_NtQ5a_QQhN6QXckwk1tvPTaPA.roa
Signing time: Fri 18 Aug 2023 11:34:24 +0000
ROA not before: Fri 18 Aug 2023 11:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.235.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.219.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:6c:d5:ec:4b:c2:63:dc:0c:c0:a8:38:98:5e:ef:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 18 11:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97f36d4396bf41084de905dc930935b6f3d368f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:0a:f7:ab:37:1c:80:32:c8:79:a2:fb:c1:
d1:cb:c8:8a:8e:f1:e5:e8:ae:6c:f3:d2:0a:4a:16:
e2:95:a6:23:86:72:c3:0f:95:d3:bb:1b:ac:04:a3:
6b:1b:f4:84:e8:c2:32:39:f6:51:af:7a:05:14:9b:
e5:b9:3b:00:81:81:e8:7e:1b:6a:64:e2:ea:9e:01:
23:cb:02:42:a9:25:82:e3:a7:10:c6:1c:93:e9:42:
f5:f3:83:39:06:5b:cc:db:a9:6f:4e:0c:77:5c:90:
30:b2:37:d6:45:ef:09:fe:6d:b0:9f:9e:42:c8:1f:
d2:34:08:4f:00:e0:2f:e4:8f:60:c7:04:35:3e:18:
c9:7a:93:c6:5a:1d:9b:db:d9:bb:a9:b6:99:c5:52:
4f:e5:5c:1c:a4:88:c2:f2:2b:f7:a8:41:c8:91:a0:
64:b9:5f:3e:d2:69:84:59:cc:d7:62:f3:70:8f:02:
31:84:29:d6:25:91:47:ee:2f:3e:eb:b5:7f:9e:67:
2e:36:02:dd:1a:91:f0:50:95:59:7c:91:a7:1f:aa:
d3:e1:e5:83:5a:23:a0:ca:4b:3e:fa:f3:c0:5c:3a:
2c:5d:eb:cd:d6:25:4b:40:32:26:1b:e2:8f:c9:d0:
e4:b4:91:2b:f3:ec:a3:7a:7c:e0:1e:34:76:39:2a:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:6D:43:96:BF:41:08:4D:E9:05:DC:93:09:35:B6:F3:D3:68:F0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l_NtQ5a_QQhN6QXckwk1tvPTaPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.149.235.0/24
45.151.89.0/24
87.121.45.0/24
91.92.21.0/24
92.119.196.0/23
93.123.30.0/23
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
193.37.41.0/24
194.113.36.0/22
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f7:13:ec:7c:91:7d:1c:9c:34:e8:30:ff:49:df:ca:6c:2d:
94:44:88:f2:1f:56:c4:77:ed:1d:b2:57:61:e6:c4:16:58:d7:
2b:21:8c:56:15:1a:4e:91:5f:b6:a3:0f:ca:b7:b2:75:1d:fd:
10:d3:b6:1c:18:0a:16:04:9c:9a:27:ef:aa:36:de:bf:a7:cf:
f8:38:04:5e:66:64:1f:11:9e:9e:4f:95:8d:77:ae:fa:c4:d6:
73:53:01:7c:21:cd:dd:3b:49:3b:eb:c2:9d:c4:5f:58:37:91:
90:7b:8d:af:5b:02:58:57:bc:29:0f:39:7d:c9:ed:ac:43:15:
01:95:8f:b4:f2:cc:70:5e:f7:95:9e:09:42:31:a5:20:f9:86:
e5:72:03:28:62:fd:c3:24:9e:ad:72:35:95:4a:fe:3a:2e:87:
d2:e7:97:4c:47:c6:9c:cb:06:cf:76:5e:6e:f4:d6:7c:8b:35:
95:99:25:63:de:20:9c:bb:77:e1:ec:b9:f4:01:2a:4c:d4:98:
f0:73:87:17:a4:8d:d1:7c:e9:ba:48:69:6e:3a:a0:b4:79:21:
53:12:5b:ec:e2:13:ac:f7:45:1e:dd:e7:bc:ef:a0:3b:5e:ff:
df:ff:27:ac:14:72:c9:f0:23:af:80:fc:28:ae:bf:54:f1:63:
42:e8:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 12:52:23 2023 by rpki-client on console-ams.rpki-client.org